Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35C6B642145411F1A4A41B7EDAE4EC9C.roa
File: 35C6B642145411F1A4A41B7EDAE4EC9C.roa (raw, json)
Hash identifier: tsG4gzsZL+dOw4tU1w24DB6gJNgnqSJaofN2NLT/laY=
Subject key identifier: 93:19:46:48:3E:D8:6F:81:16:CB:A6:26:24:0F:75:8A:78:B3:86:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35C6B642145411F1A4A41B7EDAE4EC9C.roa
Signing time: Sat 28 Feb 2026 03:18:54 +0000
ROA not before: Sat 28 Feb 2026 03:18:49 +0000
ROA not after: Sat 07 Mar 2026 03:18:49 +0000
asID: 139880
IP address blocks: 154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113751 (0x1bc57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 03:18:49 2026 GMT
Not After : Mar 7 03:18:49 2026 GMT
Subject: CN=69a25e9e-1178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:c1:58:12:bd:92:4a:9a:b3:34:a5:95:ac:
23:e2:6e:21:81:ff:27:85:51:4a:94:00:00:af:85:
0f:fd:42:34:a0:4b:1d:0c:2c:51:f9:9d:e0:3d:e0:
bc:04:0f:e2:a4:e1:75:d8:e4:0b:96:51:2e:40:1a:
0e:e0:55:5e:f0:eb:dc:3c:92:c3:b3:70:89:a7:e0:
a1:03:bb:a7:ae:0a:53:2b:84:43:24:c6:d7:07:5e:
ac:e2:19:82:80:48:d4:a5:83:f4:4c:de:f1:91:23:
25:11:3e:8b:07:a2:2b:6c:ba:ef:8f:bb:b3:05:08:
26:bc:8c:75:6f:d7:07:67:a6:d4:a5:5c:d5:0c:e1:
aa:3f:1e:24:02:f9:2e:f3:15:36:8b:ce:6a:04:f1:
03:c3:12:f0:83:a7:fc:34:f8:07:33:a9:30:bc:43:
89:2a:cc:47:8b:e1:1a:95:d2:b0:30:5f:9c:2a:3b:
8d:c0:fa:5e:8e:36:bd:bf:ac:13:99:ff:6b:7e:29:
78:e0:b1:b3:72:e4:01:35:cc:04:bf:6f:1e:bd:f2:
5c:64:41:19:dc:24:be:cd:57:fb:af:b0:0d:a1:8e:
b3:c9:55:af:61:29:33:85:78:35:0d:38:09:6f:84:
27:16:3b:b9:bb:58:e1:30:50:09:81:f8:d3:1b:dd:
5d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:19:46:48:3E:D8:6F:81:16:CB:A6:26:24:0F:75:8A:78:B3:86:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35C6B642145411F1A4A41B7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
00:72:a8:b5:cb:cf:22:b3:90:30:05:57:a2:48:3a:0b:9d:89:
6d:38:73:8b:fd:12:75:b5:02:eb:24:1e:29:15:fa:67:03:98:
95:aa:e1:86:60:b8:47:2d:31:f8:d0:52:00:b3:c6:55:3c:be:
95:45:0a:cb:db:10:1c:59:f6:7d:1f:4c:2c:7e:2b:35:05:0c:
98:69:26:d2:62:6d:f7:16:f8:e8:f6:f4:ba:5f:b8:cf:f2:22:
37:8d:25:56:44:2f:2b:f2:1c:63:97:93:1b:8c:ec:1a:08:a3:
17:f0:67:0b:3e:da:1e:27:b2:06:aa:59:f4:fc:fe:ce:2a:ab:
7d:e2:00:f2:0c:e3:f2:4d:08:e3:4c:bd:13:9a:06:98:08:bc:
c2:88:67:ed:9b:d5:39:24:f2:2e:4f:53:2b:36:bc:3a:9c:ce:
8f:fc:5c:8d:ea:3f:dd:8a:82:87:57:5c:2c:12:8e:2b:d7:6a:
18:33:a3:42:78:e9:2f:85:f4:77:fa:34:a4:ca:cd:3c:ff:10:
a1:a1:6a:c8:a1:64:14:23:0e:63:ce:c3:1c:21:91:09:ad:df:
44:6a:f6:ab:cf:48:b1:b9:8c:33:a4:ff:ac:9b:1c:7a:a9:e2:
4f:ab:9e:f4:a4:e2:69:69:77:5d:d4:c2:3f:07:4d:6e:2f:83:
4d:1e:43:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:43:43 2026 by rpki-client